Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

NIFI Get Splunk

avatar
Explorer

is it possible to get records from Splunk based on a specific index? Where can I define the different indexes I want to quey?

Thanks 

1 REPLY 1

avatar
Super Mentor

@dzbeda 
Have you tried specifying the index in your configured Query within the GetSplunk NiFi processor component?

NiFi is not going to be able to provide you a list of indexes from your Splunk to choose from, you would need to know what indexes exist in your Splunk server.

Hope this helps,

Matt